Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          R4hUDLaQE6l27bovyXCThZd/vMujjv9ld1rXP74a2kk=
Subject key identifier:   67:80:91:60:02:AC:27:0E:16:D7:83:90:C0:0D:26:DD:56:EB:F7:22
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       01964D7EC33A87A06B9C2D4EBC3128B7C08A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 10:01:15 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:15 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:15 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: f55Ts6w+YtS2LdA5IdScafo7vVq1eI+ornbPB77ojvg=)
                          2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:c3:3a:87:a0:6b:9c:2d:4e:bc:31:28:b7:c0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Apr 19 10:01:15 2025 GMT
            Not After : Apr 20 10:01:15 2025 GMT
        Subject: CN=6780916002ac270e16d78390c00d26dd56ebf722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:4c:9a:2d:90:21:17:89:fb:1c:38:21:79:
                    95:24:26:aa:c5:71:19:2d:6f:1f:cd:9d:91:fa:52:
                    e7:51:0a:7e:a2:f0:00:67:9b:af:29:23:b6:76:31:
                    30:6d:db:d0:71:c9:45:5c:3e:e2:62:ce:c2:f6:d1:
                    ce:9d:5d:73:6f:56:fd:90:e3:b4:e8:8c:64:3d:7b:
                    00:7c:08:53:26:e9:de:73:4c:88:10:f5:15:49:cc:
                    79:e7:90:da:94:42:56:9d:d7:ab:bf:ef:00:58:e0:
                    50:63:f5:ba:d0:31:d1:06:ec:de:6f:f9:b7:17:43:
                    65:c4:9b:ae:4a:a0:6e:a2:0a:98:23:05:ae:0f:36:
                    9e:77:85:bd:ac:8f:5c:97:17:f1:bf:ff:82:65:9f:
                    cb:4c:5b:1f:44:03:24:cb:41:8f:e9:0c:16:0d:d8:
                    a6:c3:7e:99:25:a0:0e:d6:f2:16:5a:c1:dd:ae:ed:
                    34:83:1b:4f:ed:05:70:74:5b:8a:d7:a8:ce:0c:82:
                    ec:2f:72:24:16:1a:e3:83:76:99:08:12:b3:f4:6d:
                    ba:02:af:c4:f4:e1:c8:6d:cf:a4:f8:ea:8f:35:33:
                    97:a5:50:9b:d7:f1:5a:dc:65:78:60:54:67:1d:7c:
                    d4:bf:df:38:57:f6:29:5e:d7:f9:78:8f:bf:15:de:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:80:91:60:02:AC:27:0E:16:D7:83:90:C0:0D:26:DD:56:EB:F7:22
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4d:d1:e9:97:d3:f0:da:2e:2b:95:75:45:89:3d:07:2a:3e:
         63:26:ea:6a:41:b0:3b:43:e7:d4:fd:1f:20:ed:a3:f1:fb:3f:
         4f:f0:de:cb:d6:ee:50:32:1d:9a:42:8d:a3:81:b8:c5:fb:f2:
         9b:b0:f9:07:71:40:79:34:76:5c:97:03:80:b3:0b:8b:8f:1d:
         50:be:f3:01:fd:de:52:72:fc:7e:87:50:8b:9d:09:15:fa:97:
         68:b9:4c:06:0c:72:f8:42:73:2e:1b:6f:06:c9:b7:73:09:9e:
         be:3f:d1:67:95:e9:61:66:fa:41:b3:b8:60:c5:92:80:3c:5c:
         5b:e2:8b:d6:3c:f5:41:f3:c1:ca:d0:0e:de:16:be:db:ec:b7:
         1c:b7:6d:02:d6:88:ed:55:2a:32:9b:d4:94:5d:eb:42:31:9b:
         7b:66:4f:98:c7:6c:3d:e5:5c:c0:11:9b:93:7b:6c:00:0c:90:
         37:6a:14:ec:71:48:e9:50:9f:a6:33:c7:21:0d:61:3c:38:1e:
         4f:27:28:82:d2:d0:70:9e:e5:fc:22:db:1a:df:d3:7a:c0:cb:
         ed:1b:47:d1:2a:f8:f6:0e:36:cf:b5:64:ba:bf:85:50:25:ad:
         97:69:c1:e8:3f:ba:be:38:d0:b8:8d:9d:87:28:d0:09:74:59:
         4b:c5:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:55:47 2025 by rpki-client